PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #20
Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security…
The correct answer is A. VPC flow logs B. Firewall logs. VPC Flow Logs records a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization…
Question
Options
- AVPC flow logs
- BFirewall logs
- CCloud Audit logs
- DStackdriver Trace
- ECompute Engine instance system logs
How the community answered
(24 responses)- A79% (19)
- C4% (1)
- D13% (3)
- E4% (1)
Explanation
VPC Flow Logs records a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization. https://cloud.google.com/vpc/docs/using-flow-logs Firewall Rules Logging allows you to audit, verify, and analyze the effects of your firewall rules. For example, you can determine if a firewall rule designed to deny traffic is functioning as intended. Firewall Rules Logging is also useful if you need to determine how many connections are affected by a given firewall rule. You enable Firewall Rules Logging individually for each firewall rule whose connections you need to log. Firewall Rules Logging is an option for any firewall rule, regardless of the action (allow or deny) or direction (ingress or egress) of the rule. https://cloud.google.com/vpc/docs/firewall-rules-logging
Topics
Community Discussion
No community discussion yet for this question.